Open tieupham267 opened 5 years ago
https://logz.io/blog/windows-event-log-analysis/
Sending Logs to ELK with Winlogbeat and Sysmon
https://www.elastic.co/blog/monitoring-windows-logons-with-winlogbeat
https://burnhamforensics.com/2018/11/18/sending-logs-to-elk-with-winlogbeat-and-sysmon/
https://logz.io/blog/windows-event-log-analysis/